Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa
File:                     9f92ce6e-3d1a-343b-bb86-db0707874013.roa (raw, json)
Hash identifier:          1rDuNNdrLhVhEPvFW6DTCEja0CxM85ctyNcbx1HY1cg=
Subject key identifier:   A9:7C:94:86:97:42:76:FC:6E:F4:0A:74:CA:75:ED:B9:D1:B9:38:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004958E94F963EA29EDE6000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.52.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:58:e9:4f:96:3e:a2:9e:de:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=1d30c264-48ec-4abd-8644-ed8a2646718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:f3:e1:de:69:12:c9:71:02:b4:9d:42:cc:
                    18:26:05:83:d7:01:02:43:4f:d3:6a:76:43:30:32:
                    d8:f0:86:8a:0e:4c:d3:5b:ce:e5:34:00:9b:cd:5e:
                    80:92:9f:b3:77:4b:b9:51:28:74:c2:04:f3:cb:46:
                    d8:dd:f7:98:24:2d:cf:2d:e0:e5:c5:c2:35:31:75:
                    7e:f5:de:6e:06:f5:3c:d7:69:5f:eb:fa:3a:44:7a:
                    cf:0b:63:a0:6f:92:5a:98:6a:1e:ca:5d:6e:a7:49:
                    30:d4:1d:2a:bc:c3:85:32:05:c1:ec:e0:08:9f:0f:
                    80:2d:54:23:9e:c7:c8:d6:5f:53:a9:8e:05:71:cf:
                    32:46:5a:78:96:07:da:49:ec:b3:20:ff:08:9a:3b:
                    26:25:00:67:b2:b1:e3:13:48:b3:07:59:9b:aa:d7:
                    38:93:20:af:a8:e6:1e:f6:16:4f:4c:8e:46:f0:d6:
                    71:dd:3d:84:ad:86:e5:d2:81:ac:b5:14:4c:44:21:
                    32:84:df:05:ea:fe:97:bc:76:56:db:16:05:5b:e5:
                    d7:44:e8:5d:bd:4c:3f:fd:92:01:e3:e0:26:88:86:
                    30:e2:1a:a0:f1:85:e2:f5:94:2f:9b:f6:80:f3:75:
                    30:3c:80:8e:2e:85:a2:d7:90:1b:12:67:32:ec:22:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:94:86:97:42:76:FC:6E:F4:0A:74:CA:75:ED:B9:D1:B9:38:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:09:94:62:a7:62:0a:28:ec:e7:e5:17:6f:25:15:da:3b:3a:
         d4:11:1d:64:d5:7d:bd:cd:b3:c1:30:e8:5b:2e:98:b4:60:83:
         4f:7e:75:d1:a4:e4:e9:39:83:71:b6:ad:fb:db:cc:d6:d0:84:
         fe:d3:12:78:0f:b2:df:52:00:64:75:c2:7b:14:3f:e4:ab:4a:
         95:f3:9b:e2:9c:3b:0c:63:dd:07:05:f5:06:63:30:4e:90:6f:
         9b:90:cd:56:dd:e8:26:86:ec:7a:3e:f8:cd:86:8b:85:0d:4e:
         d1:2d:5b:f7:1e:4a:18:13:63:0a:29:0a:64:ff:40:52:aa:31:
         19:2c:33:4d:5c:d2:96:f0:99:26:3e:bf:45:b7:ad:fa:5d:25:
         f4:89:09:1b:75:b5:d5:df:43:1d:be:24:06:2e:68:e2:6f:97:
         76:78:71:c1:cf:3f:8f:03:af:f5:22:18:26:32:6d:bb:90:ad:
         62:fa:9c:5e:98:c1:82:0e:2a:b7:3a:a5:77:b1:7a:57:40:49:
         07:bb:0e:81:f4:f5:7b:96:f9:88:c5:c3:06:f9:50:3f:25:59:
         80:bb:e1:ed:a9:87:e4:4b:0b:5a:65:b9:90:09:d2:a1:92:e3:
         cf:1f:bf:75:35:7d:a5:d9:45:3e:ca:a7:36:e4:5d:38:be:17:
         a4:b7:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:31:30 2024 by rpki-client on console-fra.rpki-client.org